Forminator Forms’ public forminator_get_nonce AJAX action handed any unauthenticated visitor a valid submission nonce for any form ID, including draft and other unpublished forms and forms configured to load via AJAX. Because the submission handler does not check the form’s publish status itself, an attacker could use the nonce to submit entries to forms the site owner never published. Affects versions 1.36.0 to 1.58.2; fixed in 1.58.3.
This vulnerability affects the following application versions:
- Forminator Forms 1.36.0
- Forminator Forms 1.36.1
- Forminator Forms 1.36.2
- Forminator Forms 1.36.3
- Forminator Forms 1.37.1
- Forminator Forms 1.38.1
- Forminator Forms 1.38.2
- Forminator Forms 1.38.3
- Forminator Forms 1.39.0
- Forminator Forms 1.39.1
- Forminator Forms 1.39.2
- Forminator Forms 1.39.3
- Forminator Forms 1.40.0
- Forminator Forms 1.41.1
- Forminator Forms 1.41.2
- Forminator Forms 1.42.0
- Forminator Forms 1.42.1
- Forminator Forms 1.42.2
- Forminator Forms 1.43.0
- Forminator Forms 1.43.1
- Forminator Forms 1.44
- Forminator Forms 1.44.1
- Forminator Forms 1.44.2
- Forminator Forms 1.44.3
- Forminator Forms 1.45
- Forminator Forms 1.45.1
- Forminator Forms 1.46.1
- Forminator Forms 1.46.2
- Forminator Forms 1.47
- Forminator Forms 1.48.2
- Forminator Forms 1.48.3
- Forminator Forms 1.49.0
- Forminator Forms 1.49.2
- Forminator Forms 1.50.1
- Forminator Forms 1.50.3
- Forminator Forms 1.51
- Forminator Forms 1.51.1
- Forminator Forms 1.52
- Forminator Forms 1.52.1
- Forminator Forms 1.52.2
- Forminator Forms 1.53.0
- Forminator Forms 1.53.0.1
- Forminator Forms 1.53.1
- Forminator Forms 1.53.2
- Forminator Forms 1.54
- Forminator Forms 1.54.0
- Forminator Forms 1.55.0
- Forminator Forms 1.55.0.1
- Forminator Forms 1.55.0.2
- Forminator Forms 1.55.1
- Forminator Forms 1.56.0
- Forminator Forms 1.56.0.1
- Forminator Forms 1.56.0.2
- Forminator Forms 1.56.1
- Forminator Forms 1.56.2
- Forminator Forms 1.57.0
- Forminator Forms 1.57.0.1
- Forminator Forms 1.57.0.2
- Forminator Forms 1.57.0.3
- Forminator Forms 1.57.0.4
- Forminator Forms 1.57.0.5
- Forminator Forms 1.57.0.6
- Forminator Forms 1.57.0.7
- Forminator Forms 1.57.0.8
- Forminator Forms 1.57.1
- Forminator Forms 1.57.1.1
- Forminator Forms 1.57.2
- Forminator Forms 1.57.2.1
- Forminator Forms 1.57.3
- Forminator Forms 1.57.3.1
- Forminator Forms 1.58.0
- Forminator Forms 1.58.1
- Forminator Forms 1.58.2